From be3f6d63be9ff513f733f0b64bde7bca78e8c148 Mon Sep 17 00:00:00 2001
From: Clay Johnson <cjohnson@gradle.com>
Date: Thu, 6 Jul 2023 08:15:26 -0500
Subject: [PATCH] Authenticate GitHub Actions builds to ge.apache.org (#5422)

This change allows GitHub Actions builds to submit build scans to ge.apache.org by authenticating those builds. The access key has been stored as an organizational secret by the ASF Infrastructure team in the Apache GitHub organization. The access key is not available to workflows triggered from forks.

This builds on the changes in https://github.com/apache/openwhisk/pull/5411
---
 .github/workflows/0-on-demand.yaml     | 3 +++
 .github/workflows/1-unit.yaml          | 3 +++
 .github/workflows/2-system.yaml        | 3 +++
 .github/workflows/3-multi-runtime.yaml | 3 +++
 .github/workflows/4-standalone.yaml    | 3 +++
 .github/workflows/5-scheduler.yaml     | 3 +++
 .github/workflows/6-performance.yaml   | 3 +++
 7 files changed, 21 insertions(+)

diff --git a/.github/workflows/0-on-demand.yaml b/.github/workflows/0-on-demand.yaml
index ec768aea005..6c0d001ede0 100644
--- a/.github/workflows/0-on-demand.yaml
+++ b/.github/workflows/0-on-demand.yaml
@@ -56,6 +56,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
   # (optional) you need to add as secrets an ngrok token and a password to debug a build on demand
   NGROK_DEBUG: ${{ inputs.enable_ngrok_debug }}
   NGROK_TOKEN: ${{ secrets.NGROK_TOKEN }}
diff --git a/.github/workflows/1-unit.yaml b/.github/workflows/1-unit.yaml
index 81709e69ca8..5dbd3006cbb 100644
--- a/.github/workflows/1-unit.yaml
+++ b/.github/workflows/1-unit.yaml
@@ -51,6 +51,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/2-system.yaml b/.github/workflows/2-system.yaml
index 9fd43279d76..fdd208fe88a 100644
--- a/.github/workflows/2-system.yaml
+++ b/.github/workflows/2-system.yaml
@@ -46,6 +46,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/3-multi-runtime.yaml b/.github/workflows/3-multi-runtime.yaml
index 4918682c5f4..66b4dd99b7c 100644
--- a/.github/workflows/3-multi-runtime.yaml
+++ b/.github/workflows/3-multi-runtime.yaml
@@ -46,6 +46,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/4-standalone.yaml b/.github/workflows/4-standalone.yaml
index 8453d396eb9..e28504379a0 100644
--- a/.github/workflows/4-standalone.yaml
+++ b/.github/workflows/4-standalone.yaml
@@ -46,6 +46,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/5-scheduler.yaml b/.github/workflows/5-scheduler.yaml
index 1d1774a93df..79461c450ab 100644
--- a/.github/workflows/5-scheduler.yaml
+++ b/.github/workflows/5-scheduler.yaml
@@ -46,6 +46,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/6-performance.yaml b/.github/workflows/6-performance.yaml
index dbc93c81436..168e62c1e17 100644
--- a/.github/workflows/6-performance.yaml
+++ b/.github/workflows/6-performance.yaml
@@ -46,6 +46,9 @@ env:
   GH_BUILD: ${{ github.event_name }}-${{ github.sha }}
   GH_BRANCH: ${{ github.head_ref || github.ref_name }}
 
+  # https://ge.apache.org
+  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
+
 jobs:
   openwhisk:
     runs-on: ubuntu-22.04